Chinese Hackers Infiltrate Firms Using Malware-Laden Handheld Scanners 93
wiredmikey (1824622) writes China-based threat actors are using sophisticated malware installed on handheld scanners to target shipping and logistics organizations from all over the world. According to security firm TrapX, the attack begins at a Chinese company that provides hardware and software for handheld scanners used by shipping and logistics firms worldwide to inventory the items they're handling. The Chinese manufacturer installs the malware on the Windows XP operating systems embedded in the devices.
Experts determined that the threat group targets servers storing corporate financial data, customer data and other sensitive information. A second payload downloaded by the malware then establishes a sophisticated C&C on the company's finance servers, enabling the attackers to exfiltrate the information they're after. The malware used by the Zombie Zero attackers is highly sophisticated and polymorphic, the researchers said. In one attack they observed, 16 of the 48 scanners used by the victim were infected, and the malware managed to penetrate the targeted organization's defenses and gain access to servers on the corporate network. Interestingly, the C&C is located at the Lanxiang Vocational School, an educational institution said to be involved in the Operation Aurora attacks against Google, and which is physically located only one block away from the scanner manufacturer, TrapX said.
Experts determined that the threat group targets servers storing corporate financial data, customer data and other sensitive information. A second payload downloaded by the malware then establishes a sophisticated C&C on the company's finance servers, enabling the attackers to exfiltrate the information they're after. The malware used by the Zombie Zero attackers is highly sophisticated and polymorphic, the researchers said. In one attack they observed, 16 of the 48 scanners used by the victim were infected, and the malware managed to penetrate the targeted organization's defenses and gain access to servers on the corporate network. Interestingly, the C&C is located at the Lanxiang Vocational School, an educational institution said to be involved in the Operation Aurora attacks against Google, and which is physically located only one block away from the scanner manufacturer, TrapX said.
China-based threat actors (Score:1, Funny)
China-based threat actors are using sophisticated malware installed on handheld scanners to target shipping and logistics organizations from all over the world [...] The Chinese manufacturer installs the malware on the Windows XP operating systems embedded in the devices.
Okay... first, is a "China-based threat actor" anything like a Chinese hacker? Or are we talking about thespians who specialize in instilling apprehension and dread, while standing on top of dinnerware? Because these are two different things.
Also... Windows XP?!? There's the problem right there. Why in the name of Bob does someone have Windows EMBEDDED in a scanner? You need a GUI to make something go "BEEP"?!? Seriously? Next you'll say that your vacuum cleaner has Windows XP embedded. Hey, look, here's a Windows XP embedded PENCIL! This new eraser I just bought... Windows 8! Yeah!